Posts

Showing posts with the label Scapy

Mutiny Fuzzing Framework - Network Fuzzer That Operates Past Times Replaying Pcaps Through A Mutational Fuzzer

Image
The Mutiny Fuzzing Framework is a network fuzzer that operates yesteryear replaying PCAPs through a mutational fuzzer. The destination is to start network fuzzing every bit apace every bit possible, at the expense of existence thorough. The full general workflow for Mutiny is to accept a sample of legitimate traffic, such every bit a browser request, as well as feed it into a prep script to generate a .fuzzer file. Then, Mutiny tin survive run with this .fuzzer file to generate traffic against a target host, mutating whichever packets the user would like. There are extensions that let changing how Mutiny behaves, including changing messages based on input/output, changing how Mutiny responds to network errors, as well as monitoring the target inwards a split thread. Mutiny uses Radamsa to perform mutations. The Decept Proxy is a multi-purpose network proxy that tin forrad traffic from a plaintext or TLS TCP/UDP/domain socket connexion to a plaintext or TLS TCP/UDP/d...

Darksplitz - Exploit Framework

Image
This tools is continued from Nefix, DirsPy as well as Xmasspy project. Installation Will operate fine inwards the debian shade operating system, similar Backbox, Ubuntu or Kali linux. $ git clone https://github.com/koboi137/darksplitz $ cd darksplitz/ $ sudo ./install.sh Features Extract mikrotik credential (user.dat) Password generator Reverse IP lookup Mac address sniffer Online md5 cracker Mac address lookup Collecting url from web.archive.org Web backdoor (Dark Shell) Winbox exploit (CVE-2018-14847) ChimeyRed exploit for mipsbe (Mikrotik) Exploit spider web application Mass apple tree dos (CVE-2018-4407) Libssh exploit (CVE-2018-10933) Discovering Mikrotik device Directory scanner Subdomain scanner Mac address scanner Mac address pinger Vhost scanner (bypass cloudflare) Mass bruteforce (wordpress) Interactive msfrpc client Exploit spider web application plUpload file upload jQuery file upload (CVE-2018-9206) Laravel (.env) sftp-config...

Isf - Industrial Command Arrangement Exploitation Framework

Image
ISF(Industrial Exploitation Framework) is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on opened upwards source projection routersploit . Read this inward other languages: English , 简体中文 , ICS Protocol Clients Name Path Description modbus_tcp_client icssploit/clients/modbus_tcp_client.py Modbus-TCP Client wdb2_client icssploit/clients/wdb2_client.py WdbRPC Version two Client(Vxworks 6.x) s7_client icssploit/clients/s7_client.py s7comm Client(S7 300/400 PLC) Exploit Module Name Path Description s7_300_400_plc_control exploits/plcs/siemens/s7_300_400_plc_control.py S7-300/400 PLC start/stop s7_1200_plc_control exploits/plcs/siemens/s7_1200_plc_control.py S7-1200 PLC start/stop/reset vxworks_rpc_dos exploits/plcs/vxworks/vxworks_rpc_dos.py Vxworks RPC remote dos(CVE-2015-7599) quantum_140_plc_control exploits/plcs/schneider/quantum_140_plc_control....

Dnslivery - Slowly Files Together With Payloads Delivery Over Dns

Image
Easy files in addition to payloads delivery over DNS. Acknowledgments This projection has been originally inspired past times PowerDNS in addition to Joff Thyer 's technical segment on the Paul's Security Weekly podcast #590 ( youtu.be/CP6cIwFJswQ ). Description TL;DR DNSlivery allows delivering files to a target using DNS equally the carry protocol. Features : allows to print, execute or salve files to the target does non require whatever customer on the target does non require a full-fledged DNS server  What work are y'all trying to solve? Easily deliver files and/or payloads to a compromised target where classic spider web delivery is non possible in addition to without the take away for a dedicated customer software . This applies to restricted environments where outgoing spider web traffic is forbidden or precisely inspected past times a curious spider web proxy. Even though to a greater extent than consummate DNS tunneling tools already be (...